English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Metrics and frameworks to quantifiably assess security measures have arisenfrom needs of three distinct research communities - statistical measures fromthe intrusion detection and prevention literature, evaluation of cyberexercises, e.g.,red-team and capture-the-flag competitions, and economicanalyses addressing cost-versus-security tradeoffs. In this paper we providetwo primary contributions to the security evaluation literature - arepresentative survey, and a novel framework for evaluating security that isflexible, applicable to all three use cases, and readily interpretable. In oursurvey of the literature we identify the distinct themes from each community'sevaluation procedures side by side and flesh out the drawbacks and benefits ofeach. The evaluation framework we propose includes comprehensively modeling theresource, labor, and attack costs in dollars incurred based on expectedresource usage, accuracy metrics, and time. This framework provides a unifiedapproach in that it incorporates the accuracy and performance metrics, whichdominate intrusion detection evaluation, the time to detection and impact todata and resources of an attack, favored by educational competitions' metrics,and the monetary cost of many essential security components used in financialanalysis. Moreover, it is flexible enough to accommodate each use case, easilyinterpretable and comparable, and comprehensive in terms of costsconsidered.Finally, we provide two examples of the framework applied toreal-world use cases. Overall, we provide a survey and a grounded, flexibleframework with multiple concrete examples for evaluating security which canaddress the needs of three currently distinct communities.

Quantifiable & Comparable Evaluations of Cyber Defensive Capabilities: A Survey & Novel, Unified Approach